Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/qaHGYzcuUZFKUgUjj-lKB9Yul6Y.roa
File:                     qaHGYzcuUZFKUgUjj-lKB9Yul6Y.roa (raw, json)
Hash identifier:          z+oA4wM1RtcpETTF6xuON+8bqkFy5h6jGu9+UtuphWQ=
Subject key identifier:   A9:A1:C6:63:37:2E:51:91:4A:52:05:23:8F:E9:4A:07:D6:2E:97:A6
Certificate issuer:       /CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
Certificate serial:       03A59469
Authority key identifier: EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/qaHGYzcuUZFKUgUjj-lKB9Yul6Y.roa
Signing time:             Fri 04 Mar 2022 08:16:39 +0000
ROA not before:           Fri 04 Mar 2022 08:16:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        194.50.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61183081 (0x3a59469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
        Validity
            Not Before: Mar  4 08:16:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9a1c663372e51914a5205238fe94a07d62e97a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:ea:f4:85:d4:21:a1:f0:30:41:8d:19:30:
                    ee:a0:35:0b:2c:53:40:e2:32:28:27:45:93:4d:58:
                    f5:18:94:cf:dc:2e:a5:21:08:6e:64:d8:d1:a8:a5:
                    26:7c:e3:99:f1:07:14:5c:af:c8:1d:b8:7e:cd:fa:
                    0e:9b:ef:61:f3:cf:96:8f:78:a4:49:d6:d7:fe:eb:
                    7b:0d:1e:f7:cf:e9:a2:5e:e9:c7:4a:1e:75:87:ae:
                    d7:29:d7:21:49:84:21:7d:f2:2d:33:a4:14:70:62:
                    40:72:f4:f5:20:59:90:c1:4f:e6:c4:78:dd:de:0c:
                    bc:1d:e5:fd:9b:41:92:d3:61:39:b3:3d:ca:4d:0b:
                    fd:56:f1:86:a1:47:d3:e5:fa:9b:ee:3c:19:f9:ac:
                    98:ee:ba:40:37:06:44:38:67:f0:a7:27:7d:f6:65:
                    c5:8d:96:7d:c9:21:37:a7:c4:f2:4f:c2:5d:ea:88:
                    d2:87:e6:04:e9:00:04:ab:f1:a3:63:29:73:bf:0c:
                    83:75:51:d4:68:f6:e5:a5:c6:c1:57:70:28:51:60:
                    bf:b5:4d:d6:85:41:84:51:af:fa:c5:ef:ea:5a:62:
                    64:66:66:68:7e:8a:31:01:6d:7f:b2:d8:f5:71:b7:
                    fd:7e:9b:b1:77:ba:e1:df:59:3f:6a:a8:ef:f5:8d:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A1:C6:63:37:2E:51:91:4A:52:05:23:8F:E9:4A:07:D6:2E:97:A6
            X509v3 Authority Key Identifier:
                keyid:EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/qaHGYzcuUZFKUgUjj-lKB9Yul6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6zF-G-e7b4LLnDSgltwIj1-Pkso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:db:00:fb:d5:0c:8b:bb:2c:86:cc:21:b0:92:3f:fa:ce:
         c6:37:e6:74:81:03:01:48:a6:a3:c8:6b:d6:e5:3b:67:ea:e3:
         db:b7:53:07:40:df:6b:8e:64:e9:ff:27:83:e4:57:04:ed:5d:
         a5:5f:87:8f:e1:a9:5c:5e:ad:99:d7:5b:81:d9:d9:38:81:ff:
         c1:03:2a:90:b6:1c:7c:9c:47:97:cb:bb:57:78:a9:d1:be:fc:
         f9:40:87:b6:b5:48:f9:c3:54:84:91:f0:a6:2e:c3:f6:78:b2:
         28:fe:65:53:90:53:8a:a6:2b:32:61:6f:5a:b5:48:5c:6a:f0:
         10:51:4b:c8:39:d2:c1:a8:27:14:c5:d1:82:17:aa:a7:23:c9:
         27:e2:0d:7c:a2:14:9d:a7:99:c8:81:0d:e3:b6:2b:76:76:b2:
         4e:42:68:32:38:88:aa:a4:fc:dd:45:8e:82:c2:e2:55:29:d3:
         b2:e2:c0:af:e0:da:18:a9:f3:12:c2:e6:5a:f6:9a:67:da:41:
         e5:03:14:4f:04:86:e7:23:48:25:e1:05:1d:a0:fa:89:a6:aa:
         5b:68:16:4f:87:52:45:59:dd:4f:9a:8b:d3:4a:03:fe:b6:39:
         b8:c1:e8:d4:e0:e0:fc:8b:28:ee:e3:fa:04:a8:e1:e2:71:e8:
         e1:d1:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:52 2024 by rpki-client on console-fra.rpki-client.org